How to Reset Expected Value PCRs after TPM Firmware Upgrade on Dual-Boot Windows 10 and Kubuntu Setup

Title: Dual-Boot Windows 10 and Kubuntu: Setting Up Windows Partition with Encrypted BitLocker

In this comprehensive guide, we will walk you through the process of setting up a dual-boot system with Windows 10 and Kubuntu, focusing on encrypting the Windows partition using BitLocker. This setup has been running smoothly for several years, and we'll help you maintain that consistency even after a distribution upgrade.

Prerequisites

Before we begin, ensure you have the following:

1. A system with Windows 10 and Kubuntu installed, dual-booting without issues for several years.
2. A Windows partition that you want to encrypt using BitLocker.

Encrypting Windows Partition with BitLocker

Step 1: Enable BitLocker

1. Open Control Panel.
2. Search for BitLocker Drive Encryption and click on it.
3. Select the drive you want to encrypt and click on Turn on BitLocker.

Step 2: Choose how to unlock the drive

1. Choose one of the following options:
   • Use a password to unlock the drive: Create a new password or use an existing one.
   • Use a smart card: If you have a smart card, you can use it to unlock the drive.
   • Use a USB drive: Insert a USB drive and follow the prompts to save the recovery key.

Step 3: Back up your recovery key

1. Save the recovery key in a secure location. You'll need this key to access your drive if you forget your password or lose your USB drive.
2. Save the recovery key to your Microsoft account if you have one.

Step 4: Encrypt the drive

1. Click on Continue to start the encryption process. This may take some time, depending on the size of your drive.
2. Once the encryption is complete, you'll be able to boot into Windows and use your encrypted drive.

Troubleshooting

If you encounter any issues during the setup process, consider the following:

1. Make sure your system meets the minimum requirements for BitLocker.
2. Ensure you have the latest updates for Windows 10.
3. If you're upgrading Kubuntu, make sure to backup your data before proceeding.

References

1. Microsoft Docs - BitLocker Drive Encryption: https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview
2. Ubuntu Manual - Installing Ubuntu alongside Windows: https://help.ubuntu.com/community/Installation/System7
3. Ubuntu Manual - Upgrading Ubuntu: https://help.ubuntu.com/community/UpgradeNotes